10429 matches found
CVE-2024-54747
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54745
WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54749
Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...
PT-2024-36412 · Ubiquiti · Ubiquiti U7-Pro
Name of the Vulnerable Software and Affected Versions: Ubiquiti U7-Pro version 7.0.35 Description: A hardcoded password vulnerability was discovered in /etc/shadow, which allows attackers to log in as root. However, the supplier disputes this claim, stating that the device cannot be deployed...
PT-2024-36411
Name of the Vulnerable Software and Affected Versions WAVLINK WN531P3 version 202383 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with elevated privileges. Recommendations F...
CVE-2024-54747: Incorrect Default Permissions
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54747
The WAVLINK WN531P3 router (version 202383 ) contains a hardcoded password vulnerability in the /etc/shadow file. This flaw stems from incorrect standard permissions, allowing a malicious actor to bypass security restrictions and gain root access to the system remotely. Exploitation can involve s...
CVE-2024-54745
The WAVLINK WN701AE router (specifically version M01AE_V240305 ) contains a hardcoded password vulnerability in the /etc/shadow file. This issue stems from the incorrect use of standard permissions in the router's microprogramming software. A malicious actor can exploit this flaw to bypass securi...
CVE-2024-53614: Use of Hard-coded Credentials
A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elevated privileges...
PT-2024-35791 · Thinkware · Thinkware Cloud Apk
Name of the Vulnerable Software and Affected Versions: Thinkware Cloud APK version 4.3.46 Description: A hardcoded decryption key in the Thinkware Cloud APK allows attackers to access sensitive data and execute arbitrary commands with elevated privileges. Recommendations: For Thinkware Cloud APK...
CVE-2024-36248
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...
CVE-2024-36248
CVE-2024-36248 affects Sharp MFPs and related devices, where API keys for cloud services are hardcoded in the main binary. This root cause can enable exposure or misuse of cloud credentials by anyone gaining access to the device, potentially allowing unauthorized external access or data exposure ...
CVE-2024-36248
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...
CVE-2024-36248
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...
PT-2024-26930 · Sharp +1 · Multiple Mfps
Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue involves hardcoded API keys for some cloud services in the "main" binary, posing security risks. The details of affected product...
CVE-2023-51638
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...
CVE-2023-51638
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...
CVE-2023-51638: Use of Hard-coded Credentials
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...